MEDIUM

GHSA-m8c5-5g3h-jjfg

freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature

Quick fix

GHSA-m8c5-5g3h-jjfg — sjbr/sr-freecap: upgrade to the fixed version with the command below.

composer require sjbr/sr-freecap:^1.2.2

Details

Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/sjbr/sr-freecap

Introduced in: 0Fixed in: 1.2.2

Fixcomposer require sjbr/sr-freecap:^1.2.2

References

https://nvd.nist.gov/vuln/detail/CVE-2009-3818[ADVISORY]
https://github.com/TYPO3-extensions/sr_freecap[PACKAGE]
https://web.archive.org/web/20091220014116/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-014[WEB]